CVE-2024-11629

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-11629
In Progress® Telerik® Document Processing Libraries, versions prior to 2025 Q1 (2025.1.205), using .NET Standard 2.0, the contents of a file at an arbitrary path can be exported to RTF.

7.1 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 4.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

References
Link Resource
https://docs.telerik.com/devtools/document-processing/knowledge-base/kb-security-rtf-filecontent-export-cve-2024-11629 Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:progress:telerik_document_processing_libraries:*:*:*:*:*:*:*:*
History

19 Feb 2025, 19:09

Type Values Removed Values Added
Summary
  • (es) En Progress® Telerik® Document Processing Libraries, versiones anteriores a 2025 Q1 (2025.1.205), que utilizan .NET Standard 2.0, el contenido de un archivo en una ruta arbitraria se puede exportar a RTF.
CPE cpe:2.3:a:progress:telerik_document_processing_libraries:*:*:*:*:*:*:*:*
First Time Progress
Progress telerik Document Processing Libraries
References () https://docs.telerik.com/devtools/document-processing/knowledge-base/kb-security-rtf-filecontent-export-cve-2024-11629 - () https://docs.telerik.com/devtools/document-processing/knowledge-base/kb-security-rtf-filecontent-export-cve-2024-11629 - Vendor Advisory

12 Feb 2025, 17:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-12 17:15

Updated : 2025-02-19 19:09

NVD link : CVE-2024-11629

Mitre link : CVE-2024-11629

CVE.ORG link : CVE-2024-11629

JSON object : View

Products Affected

progress

  • telerik_document_processing_libraries
CWE
CWE-552

Files or Directories Accessible to External Parties